Ransomware News

With RaaS platforms proliferating and initial access brokers doing the heavy lifting of compromising networks, the barrier to entry as a ransomware attacker has never been lower...

This latest series of attacks underscores the ongoing blurring of lines between nation-state-supported operations and those conducted by cybercriminal elements...

Regulatory and legal actions taken against companies who were victims of a cyberattack in order to compel transparency ironically leads to less transparency...

Halcyon publishes a quarterly RaaS and data extortion group reference guide, Power Rankings: Ransomware Malicious Quartile. Here's the ransomware gangs on the move last week...

Without meaningful repercussions, ransomware operators will continue to act with impunity, and the severity of these attacks will escalate...

LEO actions take way too long - the best way to dis-incentivize ransomware operators is to make attacks much more difficult to carry out successfully...

Executives are in a precarious position where their knowledge and actions before, during and after a security event can result in legal or regulatory consequences...

Halcyon publishes a quarterly RaaS and data extortion group reference guide, Power Rankings: Ransomware Malicious Quartile. Here's the ransomware gangs on the move last week...

Attackers can create user accounts, deploy hacking tools, exfiltrate data, perform Active Directory reconnaissance, deactivate security products and more...

These attacks are no longer simply criminal matters – specifically when the attackers target healthcare providers, utilities, or systems that administer our elections...

Organizations need to understand that today’s ransomware attacks involve a great deal more than just the delivery of malicious code that disrupts operations...

Halcyon publishes a quarterly RaaS and data extortion group reference guide, Power Rankings: Ransomware Malicious Quartile. Here's the ransomware gangs on the move last week...

Halcyon publishes a quarterly RaaS and data extortion group reference guide, Power Rankings: Ransomware Malicious Quartile. Here's the ransomware gangs on the move last week...

RansomHub published 100 gigabytes of exfiltrated data belonging to the Florida Department of Health asserting that the agency failed to pay a ransom demand...

Ransomware attacks contribute to increased patient mortality rates, and they should be treated as a national security risk so different rules of engagement kick in...

With data exfiltration, an organization may still be subject to extortion because the attackers already have stolen sensitive data...

Halcyon publishes a quarterly RaaS and data extortion group reference guide, Power Rankings: Ransomware Malicious Quartile. Here's the ransomware gangs on the move last week...

Observations indicate new threat actors Volcano Demon, Arcus Media, APT73, dan0n and Space Bears are organized and well funded...

It’s time to reclassify ransomware attacks against the healthcare sector as a national security issue so we can leverage more aggressive response options....

RaaS platforms like the one KillSec is offering greatly reduce the technical barriers to becoming a ransomware operator - essentially anyone can spin up an attack...

The attack on CDK highlights the challenges in responding to and recovering from successful ransomware attacks, especially when the attack has a big blast radius...

Halcyon publishes a quarterly RaaS and data extortion group reference guide, Power Rankings: Ransomware Malicious Quartile. Here's the ransomware gangs on the move last week...

At this point, it is just as or even more likely that LockBit is blowing smoke to bolster its reputation with affiliate attackers than having actually carried out a successful attack against the Fed...

Locals turn to Reddit’s /r/Seattle to share experiences and share the repercussions a ransomware attack has had on their lives...

In the months of April and May 2024, four notable ransomware groups surfaced, each demonstrating unique tactics, techniques, and procedures...

During the week of May 27th to June 2nd, four ransomware groups—LockBit, Akira, Play, and RansomHub—wreaked havoc across various sectors

Mass exploitation of vulnerabilities is evidence that ransomware gangs are leveraging automation to target exposed organizations who have not patched..

Halcyon publishes a quarterly RaaS and data extortion group reference guide, Power Rankings: Ransomware Malicious Quartile. Here's the ransomware gangs on the move last week...

Guidelines and frameworks are a nice public relations campaign for the government, but they don’t do anything to protect us from the very real risk to life we are facing from ransomware attacks...

Ransomware attacks on healthcare providers are negatively impacting patient outcomes – a nice way of saying attacks increase the likelihood of death...